Postfix vulnerability on port 25

It’s worse than you think. Emails can be received in the clear without any encryption at all!

This is just how SMTP works - it’s an insecure protocol, like HTTP. You can’t require encryption or you might stop receiving mail from old or misconfiugred mail servers.

1 Like